Senior Offensive Security Engineer - Rust & P2P Systems

ProducePay; Sterling (VA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive health, dental, and year

401(k) match

Equity options

$200/month Health & Wellness stipend

Continuing Education support

$500/year Function Health subscription

Free parking for in-office employees

Flexible Time Off (FTO)

Parental leave for eligible employees

Supplemental life insurance

Job summary

webAI is building the next generation of decentralized, on-edge AI infrastructure with private, sovereign AI. We seek a highly technical Offensive Security Engineer who writes production Rust code, influences architecture, and embeds security from day one within peer-to-peer, distributed systems.

This founding role partners with product and platform engineers to deliver secure features, perform threat modeling, and remediate vulnerabilities throughout the software lifecycle in a

Qualifications

• 8+ years of experience in software engineering or security.
• Hands-on Rust production systems experience.
• Experience performing security-focused code reviews and vulnerability analysis.
• Experience embedding with engineering teams and contributing to software design.
• Strong knowledge of secure development practices and distributed systems.
• Experience with architecture reviews and translating security requirements into engineering solutions.
• Familiarity with authentication/authorization, cryptographic libraries & protocols, secure communications, key management.

Responsibilities

• Live within the engineering team; design and build secure features throughout the software development lifecycle.
• Participate in architecture and design reviews, identifying security risks early and collaborating with engineers on practical, scalable solutions.
• Contribute production-quality code in Rust and other languages as needed to implement security-critical functionality.
• Design and implement secure communication patterns, authentication mechanisms, and cryptographic services for decentralized systems.
• Evaluate new product features for security implications and recommend design improvements before implementation begins.
• Perform security-focused code reviews with an emphasis on exploitability, resiliency, and secure implementation patterns.
• Lead implementation efforts to remediate vulnerabilities discovered through internal testing, penetration testing, or external assessments.
• Work with engineering teams to prioritize security improvements while balancing performance, usability, and product requirements.
• Design, implement, and improve security controls for peer-to-peer networking, distributed protocols, edge AI workloads, and device-to-device communications.
• Serve as the dedicated security engineering partner for the IDN team, influencing architecture, implementation, and vulnerability remediation activities across the platform.
• Conduct threat modeling exercises for new platform capabilities, distributed protocols, network services, and architectural changes
• Assess security implications of peer discovery, node identity, trust establishment, relay services, NAT traversal, encrypted communications, and distributed trust models.
• Evaluate platform resilience against malicious nodes, protocol abuse, unauthorized access, data manipulation, and other adversarial behaviors common to decentralized systems.
• Partner with architects and engineering leadership to identify and address security risks during architecture and design phases before implementation begins.

Skills

Rust production systems

Security-focused code reviews

Threat modeling

Distributed systems

Peer-to-peer networking

Security-focused development

Architecture reviews

Job description

webAI is building the next generation of decentralized, on-edge AI infrastructure with private, sovereign AI. We seek a highly technical Offensive Security Engineer who writes production Rust code, influences architecture, and embeds security from day one within peer-to-peer, distributed systems.

This founding role partners with product and platform engineers to deliver secure features, perform threat modeling, and remediate vulnerabilities throughout the software lifecycle in a